To fix this behavior, remove the NGSERVER user account from the Deny logon locally user right in the Default Domain ControllersGroup Policy Object ( GPO) on the Windows 2000 based primary domain controller.

NOTE: When you install Norton Ghost, it creates a NGSERVER user account and assigns it the following user rights in the Default Domain Controllers GPO:

Act as part of the operating system Add workstations to domain Deny logon locally Log on as a batch job Log on as a service Shut down the system